PT-2026-76898

This update for openssl-1 1-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...

POKEx: Performance Analysis of POKE-Key Exchange and SIDH-Variants

In this paper, we present a comparative performance analysis of the POKE-based key exchange and SIDH variants. SIDH gained attention for its small key size and efficient performance, and has been selected as an alternate candidate in NIST PQC Round 4. However, following the key recovery attack by...

CVE-2026-67585: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...

SUSE-SU-2026:23127-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. -...

TencentOS Server 3: grafana (TSSA-2026:0805)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0805 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

PT-2026-76547

This update for openssl-1 1 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

PT-2026-68626

Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.2 Description An unauthenticated remote attacker can cause server CPU exhaustion by providing a long CSS declaration within sanitized HTML. The issue resides in the HtmlSanitizeEx.Scrubber.CSS.scrub/...

CVE-2026-68749: Inefficient Regular Expression Complexity

Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene htmlsanitizeex allows an unauthenticated remote attacker to exhaust server CPU via a long CSS declaration in sanitized HTML. The declaration regex in HtmlSanitizeEx.Scrubber.CSS.scrub/1 matches the property name...

SUSE SLES12 Security Update : libXfont2 (SUSE-SU-2026:3499-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3499-1 advisory. - CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. - CVE-2026-59679: fsreadglyphs heap OOB...

CVE-2026-19024 HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message

NULL pointer dereference in H5Pgetfillvalue in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is not normalized to the library's "undefined" sentinel and...

CVE-2026-70603

The provided documents describe CVE-2026-70603 for Electron: shell.openPath() could bypass path validation when a string-based check is used and embedded null bytes are present. Affected versions are prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1. If an application passes untrusted input-deri...

CLSA-2026-1785936779 TuxCare security update for org.apache.commons:commons-compress (2 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.14-tuxcare.1...

Security update for wireshark

This update for wireshark fixes the following issues: Update to version 4.6.7: CVE-2026-5299: ICMPv6 dissector crash bsc1263757. CVE-2026-5401: AFP dissector crash bsc1263756. CVE-2026-5402: TLS dissector crash and possible code execution bsc1263755. CVE-2026-5403: SBC audio codec crash bsc126376...

[SECURITY] [DLA 4717-1] linux security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4717-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 05, 2026 https://wiki.debian.org/LTS -...

CLSA-2026-1785909110 TuxCare security update for org.apache.commons:commons-compress (1 CVE)

TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.12-tuxcare.1...

PT-2026-69009

These are all security issues fixed in the libssh2-1-1.11.1-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-69008

These are all security issues fixed in the java-1 8 0-openjdk-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-66881: Relative Path Traversal

Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livemd notebook can declare fileentries metadata, each entry carrying a name. Every path that creates a file entry through...

SUSE SLES15: libopenssl-1_1-devel / libopenssl1_1 / libopenssl1_1-32bit / etc (SUSE-SU-2026:3488-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3488-1 advisory. This update for openssl-11 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlle...

PT-2026-68319

Name of the Vulnerable Software and Affected Versions livebook versions 0.15.0 through 0.18.6 livebook versions 0.19.0 through 0.19.8 Description A Cross-Site Request Forgery CSRF issue exists when Livebook is configured to use Livebook Teams for identity. The handle request/4 function in...